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IN THE CLAIMS 

Please add claims 25-3 1 . 

Please cancel claims 3, 15 and 19. 

Please amend claims 1, 4, 5, 10, 14, 16-18 and 20 as follows: 



1. (Currently Amended) A network usage recording system comprising: 
Aa collector including: 
\ an encapsulator for reading a plurality of network data records from a network 
data source and converting the network data records to a plurality of normalized metered 
events; 

an aggregator for processing the normalized metered events to create 
aggregated normalized metered events; and 

a_data storage system, wherein the aggregator periodically stores the 
aggregated normalized metered events in the data storage system s and 

a configuration server in communication with the encapsulator, the aggregator 
and the data storage system, wherein the configuration server stores configuration data for the 
encapsulator, the aggregator, and the data storage system that determines whether the 
collector operates as a network data collector or a correlator collector. 



2. (Original) The system of claim 1, wherein the aggregator includes volatile memory 
for temporary storage of the aggregated normalized metered events. 

3. (Cancelled) 

(Currently Amended) The system of claim 31 , wherein the configuration server 
Communicates the configuration data to the encapsulator, the aggregator and the data storage 
system at start-up. 
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(Currently Amended) The system of claim 31 , further comprising a collector shell, 
wherein the configuration server communicates with the encapsulator, the aggregator and the 
data storage system via thea collector shell. 



p. 




j/ (Original) The system of claim 1 , further comprising a query manager in 
communication with the data storage system for querying the data storage system. 

U> J? 

p( (Original) The system of clairn^ wherein the query manager is in communication 
with the data storage system via the aggregator. 

W. (Original) The system of claim 1 , further comprising a statistics log, wherein the 
statistics log is in communication with the encapsulator, the aggregator and the data storage 
system for logging statistical data. 

7 0 

ft. (Original) The system of claim 8; further comprising a collector operator, wherein the 
collector operator communicates with the encapsulator, the aggregator, the data storage 
system and the statistics log to provide administrative access. 

y/f. (Currently Amended) The system of claim 1 , wherein the encapsulator further 
includes a parser ©for parsing network data received from the network data souce. 

,iv> 

y(. (Original) The system 1, wherein the collector is configured as a network data 
collector. 

\\ 

LZ. (Original) The system of claim 1, wherein the collector is configured as a correlator 
collector. 

f 

\y. (Original) The system of claim 1, wherein the collector is configured to perform 
additional levels of data reduction and consolidation of data stored in other collectors. 
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(Currently Amended) A network usage recording system comprising: 
a collector system including: 



a collector shell; 

a query manager; 

an encapsulator; 

an aggregator;-a»d 

a data storage system s and 



a configuration server in communication with the encapsulator, the aggregator 
and the data storage system, the configuration server stores configuration data for the 
collector that determines whether the collector system operates as a network data collector or 
a correlator collector. 

15. (Cancelled) 



yft. (Currently Amended) The system of claim ASIA, wherein the configuration server 
communicates with the encapsulator, the aggregator and the data storage system via the 
collector shell. 



47. (Currently Amended) A method for recording network usage comprising th e steps oi 

defining a collector including an encapsulator, an aggregator and a data storage 

system; 

operating the encapsulator to read a plurality of network data records from a network 
data source and convert the network data records to a plurality of normalized metered 
events; 

aggregating the plurality of normalized metered events to create a plurality of 
aggregated normalized metered events ;-aftd 

storing the aggregated normalized metered events in the data storage system at 
periodic intervals^ 

defining a configuration server in communication with the encapsulator, the 
aggregator and the data storage system; and 
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storing configuration data for the 

encapsulator, the aggregator an ; d the data storage system in the configuration server 
Where the configuration data determines whether the collector operates as a network 
data'collector or a correlator collector. 

>&\ (Currently Amended) The method of claim^l^, further comprising th e st e ps of 
defining the aggregator to include voli tale volatile memory and storing the aggregated 
normalized metered events temporarily in the volital e volatile memory. 



19. (Cancelled) 

7^. (Currently Amended) The method of claim 4917^ further comprising the step of 
transferring the configuration data to the encapsulator, the aggregator and the data storage 
system at start-up. 

y[. (Original) The method of claim further comprising the step of defining a query 
manager in communication with the data storage system for managing queries of the data 
storage system. 

^2. (Original) The method of claim jrf, further comprising the step of defining a statistics 
log in communication with the encapsulator, the aggregator and the data storage system, and 
collecting statistics associated with the encapsulator, the aggregator and the data storage 
system in the statistics log. 

f $ 

2Z, (Original) The method of claim \7\ further comprising the step of parsing the 
network data records from the usage data source read by the encapsulator. 



a* 



7^t (Currently Amended) A computer readable medium containing instructions for 
controlling a computer system to perform a method for recording network usage comprising 
the st e ps of : 
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defining a collector including an encapsulator, an aggregator and a data storage 

system; 

operating the encapsulator to read a plurality of network data records from a network 
data source and convert the network data records to a plurality of normalized metered events; 

aggregating the plurality of normalized metered events to create a plurality of 
aggregated normalized metered events ;-and 

storing the aggregated normalized metered events in the data storage system at 
periodic intervals: :; and 

defining a configuration server in communication with the encapsulator, the 

aggregator and the data storage system; and 

storing configuration data for the encapsulator, the aggregator and the data storage x 
system in the configuration server where the configuration data determines whether the 
collector operates a network data collector or a correlator collector. 



?? 




(New) A network usage recording system comprising: 

a plurality of configurable collectors, where each collector configurable to operate as 
one of a plurality of collector types, the collector types including a data collector and a 
correlator collector; 

a configuration server in communication with each configurable collector, where the 
configuration server stores configuration data for each configurable collector that determines 
the collector type for each collector, and once the configuration data is transferred to each 
configurable collector, each configurable collector becomes the collector type associated with 
the configuration data. 

(New) The system of claim 2f>, wherein the collector types include an aggregator 
collector. 



(New) The system of claim ^6, where each configurable collector includes three 



configurable components: an encapsulator, an aggregator and a data storage system. 
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(New) The system of claim 2pi where the configuration data includes encapsulator 
configuration data, aggregator configuration data and data storage system configuration data. 

7$. (New) The system of claim ^7, wherein the configuration data includes aggregator 
configuration data, and where the aggregator configuration data includes a flush policy, 
aggregation scheme and rules. 

y. (New) The system of claim 2$ y where each configurable collector independently 
queries the configuration server for configuration data, and the configuration server transfers 
the configuration data for each configurable collector to the corresponding configurable 
collector. 

t t 

3/1 . (New) The system of claim 30; where each configurable collector queries the 
configuration server at start-up of the configurable collector. 



